<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
Hi Julien,<br>
I'd solve it by having two configurations, one for the static and one for the dynamic address assignment.<br>
The order is irrelevant, I'd put the one that's matching more often first.<br>
Configure the AuthByPolicy of the Handler to ContinueUntilAccept so both cases are checked until one returns accept.<br>
<br>
So the static case is the easier one, just one AuthBy LDAP2 (note the case of AuthBy, you have it wrong in your original email) with a SearchFilter on Service-Type != DHCP (or Service-Type = Static or whatever value it has in your LDAP directory).<br>
<br>
The dynamic case has the two AuthBy's (LDAP2 and DYNADDRESS) in an AuthBy GROUP with AuthByPolicy set to ContinueWhileAccept.<br>
<br>
Best regards, Alex<br>
<br>
<div class="moz-cite-prefix">On 2016-07-01 18:20, Julien CAVOIZY wrote:<br>
</div>
<blockquote cite="mid:HE1PR0301MB22987C17362AE4D99C776227F9250@HE1PR0301MB2298.eurprd03.prod.outlook.com" type="cite">
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal">Hello,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I am building a new authentication model for a new telco operator and I have a problem :<o:p></o:p></p>
<p class="MsoNormal">In the same Handler, I want to authenticate on a <Authby LDAP2> and only if I get an attribute « service-type = DHCP » in the LDAP response it should go to a second <AuthBy DYNADDRESS> to allocate a dynamic IP.<o:p></o:p></p>
<p class="MsoNormal">I need that to do static IP allocation and fallback if not available to dynamic IP allocation.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">How would you handle this with radiator ?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thank you <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Julien<o:p></o:p></p>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset> <br>
<pre wrap="">_______________________________________________
radiator mailing list
<a class="moz-txt-link-abbreviated" href="mailto:radiator@open.com.au">radiator@open.com.au</a>
<a class="moz-txt-link-freetext" href="http://www.open.com.au/mailman/listinfo/radiator">http://www.open.com.au/mailman/listinfo/radiator</a></pre>
</blockquote>
<br>
<br>
<font face="Verdana" color="Purple" size="2"><br>
*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*<br>
T-Systems Austria GesmbH Rennweg 97-99, 1030 Wien<br>
Handelsgericht Wien, FN 79340b<br>
*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*<br>
Notice: This e-mail contains information that is confidential and may be privileged.<br>
If you are not the intended recipient, please notify the sender and then<br>
delete this e-mail immediately.<br>
*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*<br>
</font>
</body>
</html>